This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft File: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json) Hash identifier: se//oUJx877BcxBKS9ld4ZYmZ3uj5y7ZecfoMZ7MPRw= Subject key identifier: 9C:D1:E8:B3:7A:2E:99:55:16:AB:1C:94:A5:68:90:F4:FC:51:96:89 Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33 Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233 Certificate serial: 019B2552FAD2C502FB6269369375FD0DE6DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft Manifest number: 177F Signing time: Tue 16 Dec 2025 04:02:33 +0000 Manifest this update: Tue 16 Dec 2025 04:02:33 +0000 Manifest next update: Wed 17 Dec 2025 04:02:33 +0000 Files and hashes: 1: TsaeWiaMsP1j_z_xMCDhi5soRx0.roa (hash: cFv4JeYxc6KlGhF0oX6eBMNahY8RJkA5Wg3CLEjEyhU=) 2: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: rc2ojAkA3ZfgbEv5PlR3V7e5W5S9QeEuEPDexOfpw7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:fa:d2:c5:02:fb:62:69:36:93:75:fd:0d:e6:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233 Validity Not Before: Dec 16 04:02:33 2025 GMT Not After : Dec 17 04:02:33 2025 GMT Subject: CN=9cd1e8b37a2e995516ab1c94a56890f4fc519689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:86:36:54:9b:c9:01:55:bf:f4:7c:37:b2:61: 7c:ea:de:9a:84:20:73:4f:81:b7:45:75:bb:95:37: 8f:eb:f6:0a:c7:ee:06:fc:0e:47:2d:b7:8a:45:9f: d7:c3:1c:bd:8d:e6:00:5d:99:e9:c4:1d:b7:13:29: d5:e9:6c:43:85:ed:73:51:e4:d8:94:e4:0e:7e:6b: 02:a2:82:ae:10:98:57:88:91:95:b4:b0:74:74:b8: 59:83:3a:88:a9:c8:cc:79:cb:24:72:c0:bb:ac:06: 2b:84:c2:34:5e:52:c9:25:1e:5f:7b:39:de:b6:2e: 25:e3:ca:6f:5a:69:d4:76:81:51:69:e3:f9:52:24: 3c:2c:e9:70:82:b5:39:4f:8b:b8:59:1f:6f:c5:42: 1d:2d:00:6a:d5:ee:2e:4f:82:e2:fa:54:58:d9:f7: af:82:e6:82:24:ba:92:4c:dd:dd:86:f7:f1:36:bd: 12:0f:b7:69:23:f0:fe:d4:83:93:a1:ed:17:3b:2c: 9f:e9:6b:b0:02:7e:81:de:69:d2:57:45:52:d5:07: 9c:85:25:14:96:12:bc:6a:1f:6d:d1:c6:52:df:22: 7b:1e:3b:5f:24:7b:9f:d0:26:88:c8:c0:c4:cb:85: ce:d8:6d:27:27:23:37:6d:df:2b:c2:d4:ab:94:a3: a9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D1:E8:B3:7A:2E:99:55:16:AB:1C:94:A5:68:90:F4:FC:51:96:89 X509v3 Authority Key Identifier: keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:6a:22:23:14:54:33:50:98:ca:ac:6a:4f:46:5a:e9:95:77: ef:cc:a6:da:89:50:b0:9d:34:1f:5e:3b:a6:19:3c:ea:4a:95: 15:ac:7b:3d:6d:b5:10:51:7b:90:9c:07:0f:2b:02:53:24:00: 81:91:0d:29:60:86:fe:61:5b:12:8c:2b:22:e5:ff:d9:5e:7d: 79:cd:02:08:58:c2:c7:35:43:ed:5c:0c:81:8e:96:a0:9f:36: 36:42:bd:82:86:71:6c:00:9f:f3:4c:c9:05:c5:75:f2:27:f2: 66:8c:b1:06:f7:3f:2a:01:b3:26:3b:f0:5e:d2:3e:c4:92:af: df:09:f8:67:ab:cf:c0:54:a1:89:91:ff:e6:05:ed:c7:14:f6: 76:01:3d:30:77:00:33:95:40:58:ae:a0:c2:64:66:ac:f0:e9: fc:81:9f:4a:82:85:53:de:77:66:1a:0f:9e:bd:19:f3:a0:8b: 93:48:2f:3a:82:c0:f0:d1:18:dd:dc:87:50:41:20:a4:97:de: 1a:b8:65:f0:ee:c1:cd:34:61:07:c5:ae:9c:88:b0:dc:57:b7: a7:23:64:77:d5:53:18:d4:1d:9f:37:13:24:c9:50:f6:63:94: b7:82:3b:db:f4:11:f9:57:a2:69:d3:22:67:9e:c6:e4:03:b4: 05:b2:49:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUvrSxQL7Ymk2k3X9DebfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NjU2NGZjMjA2YzRiYzVkYjU4ZjdlZmJiYjFlOGY4ODQ5 OWUyMzMwHhcNMjUxMjE2MDQwMjMzWhcNMjUxMjE3MDQwMjMzWjAzMTEwLwYDVQQD Eyg5Y2QxZThiMzdhMmU5OTU1MTZhYjFjOTRhNTY4OTBmNGZjNTE5Njg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoY2VJvJAVW/9Hw3smF86t6ahCBz T4G3RXW7lTeP6/YKx+4G/A5HLbeKRZ/Xwxy9jeYAXZnpxB23EynV6WxDhe1zUeTY lOQOfmsCooKuEJhXiJGVtLB0dLhZgzqIqcjMecskcsC7rAYrhMI0XlLJJR5fezne ti4l48pvWmnUdoFRaeP5UiQ8LOlwgrU5T4u4WR9vxUIdLQBq1e4uT4Li+lRY2fev guaCJLqSTN3dhvfxNr0SD7dpI/D+1IOToe0XOyyf6WuwAn6B3mnSV0VS1QechSUU lhK8ah9t0cZS3yJ7HjtfJHuf0CaIyMDEy4XO2G0nJyM3bd8rwtSrlKOpCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzR6LN6LplVFqsclKVokPT8UZaJMB8GA1UdIwQY MBaAFHdlZPwgbEvF21j377ux6PiEmeIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NjE5MzctOTlmZS00YjQ4LTk5YjIt ZGQ5MDdiNzc0ZjIyLzEvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi84NjE5MzctOTlmZS00YjQ4LTk5YjItZGQ5MDdiNzc0ZjIy LzEvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWoiIxRU M1CYyqxqT0Za6ZV378ym2olQsJ00H147phk86kqVFax7PW21EFF7kJwHDysCUyQA gZENKWCG/mFbEowrIuX/2V59ec0CCFjCxzVD7VwMgY6WoJ82NkK9goZxbACf80zJ BcV18ifyZoyxBvc/KgGzJjvwXtI+xJKv3wn4Z6vPwFShiZH/5gXtxxT2dgE9MHcA M5VAWK6gwmRmrPDp/IGfSoKFU953ZhoPnr0Z86CLk0gvOoLA8NEY3dyHUEEgpJfe Grhl8O7BzTRhB8WunIiw3Fe3pyNkd9VTGNQdnzcTJMlQ9mOUt4I72/QR+VeiadMi Z57G5AO0BbJJzQ== -----END CERTIFICATE-----Generated at Tue Dec 16 10:47:45 2025 by rpki-client